Use Istio 1.0.0.

DEVELOPMENT.md

@@ -124,7 +124,7 @@ kubectl create clusterrolebinding cluster-admin-binding \
 ### Deploy Istio
 
 ```shell
-kubectl apply -f ./third_party/istio-1.0-prerelease/istio.yaml
+kubectl apply -f ./third_party/istio-1.0.0/istio.yaml
 ```
 
 Follow the [instructions](./docs/setting-up-ingress-static-ip.md) if you need
@@ -215,7 +215,7 @@ ko delete --ignore-not-found=true \
   -f config/monitoring/100-common \
   -f config/ \
   -f ./third_party/config/build/release.yaml \
-  -f ./third_party/istio-1.0-prerelease/istio.yaml
+  -f ./third_party/istio-1.0.0/istio.yaml
 ```
 
 ## Telemetry

docs/creating-a-kubernetes-cluster.md

@@ -143,7 +143,7 @@ To use a k8s cluster running in GKE:
        so deploy istio with `LoadBalancer` replaced by `NodePort`:
 
        ```bash
-       sed 's/LoadBalancer/NodePort/' third_party/istio-1.0-prerelease/istio.yaml | kubectl apply -f -
+       sed 's/LoadBalancer/NodePort/' third_party/istio-1.0.0/istio.yaml | kubectl apply -f -
        ```
 
        (Then optionally [enable istio injection](../DEVELOPMENT.md#deploy-istio).)

hack/release.sh

@@ -28,7 +28,7 @@ readonly SERVING_RELEASE_GCR
 
 # istio.yaml file to upload
 # We publish our own istio.yaml, so users don't need to use helm"
-readonly ISTIO_YAML=./third_party/istio-1.0-prerelease/istio.yaml
+readonly ISTIO_YAML=./third_party/istio-1.0.0/istio.yaml
 # Local generated yaml file.
 readonly OUTPUT_YAML=release.yaml
 # Local generated lite yaml file.

test/e2e-tests.sh

@@ -32,7 +32,7 @@
 [ -v KNATIVE_TEST_INFRA ] || exit 1
 
 # Location of istio for the test cluster
-readonly ISTIO_YAML=./third_party/istio-1.0-prerelease/istio.yaml
+readonly ISTIO_YAML=./third_party/istio-1.0.0/istio.yaml
 
 # Helper functions.
 

third_party/istio-1.0.0/README.md

@@ -0,0 +1,15 @@
+This istio.yaml file is is generated by running
+```
+./download-istio.sh
+```
+
+The Helm options we used are:
+
+1. `sidecarInjectorWebhook.enabled=true` & `sidecarInjectorWebhook.enableNamespacesByDefault=true`: We allow sidecar injection on all namespaces.
+2. `global.proxy.autoInject=disabled`: However, only apply sidecar injection for Pods annotated with `istio.sidecar.inject=true`, and not as a default.
+3. `prometheus.enabled=false`: Disable Prometheus by default.
+
+Our goal here is to allow sidecar injection for Pods created by Knative, and
+nothing else.  This template is used in integration tests and also released as
+an Istio-one-line-installation so that our users don't have to go through a lot
+of steps to install Istio.

third_party/istio-1.0-prerelease/download-istio.sh → third_party/istio-1.0.0/download-istio.sh

@@ -1,6 +1,7 @@
 # Download and unpack Istio
-ISTIO_VERSION=release-1.0-20180723-09-15
-DOWNLOAD_URL=https://storage.googleapis.com/istio-prerelease/daily-build/${ISTIO_VERSION}/istio-${ISTIO_VERSION}-linux.tar.gz
+ISTIO_VERSION=1.0.0
+DOWNLOAD_URL=https://github.com/istio/istio/releases/download/${ISTIO_VERSION}/istio-${ISTIO_VERSION}-linux.tar.gz
+
 wget $DOWNLOAD_URL
 tar xzf istio-${ISTIO_VERSION}-linux.tar.gz
 cd istio-${ISTIO_VERSION}
@@ -9,7 +10,6 @@ cd istio-${ISTIO_VERSION}
 helm template --namespace=istio-system \
   --set sidecarInjectorWebhook.enabled=true \
   --set sidecarInjectorWebhook.enableNamespacesByDefault=true \
-  --set global.proxy.image=proxyv2 \
   --set global.proxy.autoInject=disabled \
   --set prometheus.enabled=false \
   install/kubernetes/helm/istio > ../istio.yaml